MAL-2025-184635 Malicious code in odasv-knu-bonijavufcadcfvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219fa2d98a2b2474d3447aae091b5c5107780f60941e464fd6846f263418c79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183310 Malicious code in libc-ubg-atafuaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e967360dffb3d396e8744a57e2e1324abc4413fc45e699d0ec457f5b6bf6cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f20bd9cb0bc58e595f39c6399bedb6b92035d94ffa79e7a77d6889d61b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aba48c4653b10127992b6ea4a0159943cf54bb7addb94cbfb76fc8cd5fcc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac86ccd8cc78a48ab444ab4599ddb88b7de6e24d78c4c555b288843cfb2842a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a2a08b093c89438515a65fef880ec01968473eda4913d6b608ca7eac656d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigiyacbagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb60a759d035eab491d7cfaa0a1e9fa7ccc26cfc0443292949d49a8b56fc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53c003c016d5a91c9cee42f7211faef58951706c3ec9a6df8cfac3e9afd5f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafdacatfeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be977f4db7f31328c093540f79a1587c9078438ded32449f5c087acc2ad25bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6edee0ed8a3aa1dbc2d76b49751a9682c7fa4e960843d6cd83e4a948d77e3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31624230ab762945a6dec8cc424141c7e9c5dea7f79281a69a8e8c8f06b22e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusiabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309c255175f8c238e57c8c56c5e311d59f85d14d15348b22ce738071b7a2ff2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb81084814a3a38ce459fd2b660ce3bf6273b24a3ff1e241b43f7354c56f5433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bca23b42de05678abd0a724ac772f55b6c9c62ab44b81ca63c831b36f3f4483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab4acfbac3870f70341187d45cddc17523c011172791d49c5d701f49aa96121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183370 Malicious code in lobac-ub-afdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e80fb8e41c4d94f7aa38d5a729ecd5cb443f2636b59d5fe34aa647dae90387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182425 Malicious code in imodiov-kufni-acumnacffgteafsgrdcadfavfhafebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0542a2ff20ca86b3c21ac7c8aabf587fe9b37b0309173d9c03798ddad3ec032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181960 Malicious code in flights-inlutag-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d915f4d779d1e61b8d2cbf6938a766c5e2e6971d5fcc796e4c569d3b140dd2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185229 Malicious code in soniec-kat-faverfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f9ca3ce359b3f997b188c86ea2acda14e87f2d527927e9fe7e1edbbbb2477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...